Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,791All CVEsplus 19,141 rejected
- 649Last 24 hours3,086 in the last 7 days
- 17,141Last 30 days1,603 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 4 | 1 | 0 | 5 | 21 |
| 2025 | 0 | 2 | 2 | 0 | 0 | 4 | 16 |
| 2024 | 1 | 1 | 1 | 0 | 0 | 3 | 12 |
| 2023 | 0 | 1 | 0 | 0 | 0 | 1 | 9 |
| 2022 | 0 | 1 | 3 | 0 | 0 | 4 | 8 |
| 2021 | 0 | 0 | 4 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-86200 | PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWTpmmp · PocketMine-MP | Medium6.9 |
| CVE-2026-20210 | Cisco Catalyst SD-WAN Manager Privilege Escalation VulnerabilityCisco · Cisco Catalyst SD-WAN Manager | Medium5.4 |
| CVE-2026-20209 | Cisco Catalyst SD-WAN Manager Privilege Escalation VulnerabilityCisco · Cisco Catalyst SD-WAN Manager | Medium5.4 |
| CVE-2026-28718 | Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux,…Acronis · Acronis Cyber Protect 17 | Medium5.3 |
| CVE-2025-69230 | AIOHTTP Vulnerable to Cookie Parser Warning Stormaio-libs · aiohttp | Low2.7 |
| CVE-2025-8696 | DoS attack against the Stork UI from an unauthenticated userISC · Stork | High7.5 |
| CVE-2025-51397 | A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or… | Medium5.4 |
| CVE-2025-53636 | Open OnDemand Shell App closed websocket DoSOSC · ondemand | Medium5.4 |
| CVE-2024-55628 | Suricata oversized resource names utilizing DNS name compression can lead to resource starvationOISF · suricata | High7.5 |
| CVE-2024-36072 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the… | Critical9.8 |
| CVE-2024-36416 | SuiteCRM v4 API Excessive log data DOSsalesagility · SuiteCRM | High8.6 |
| CVE-2024-1141 | Glance-store: glance store access key logged in debug log levelglance-store | Medium5.5 |
| CVE-2023-23949 | An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.Symantec Identity Management And Governance | High8.1 |
| CVE-2022-39874 | Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.Samsung Mobile · Samsung Account | Medium4.0 |
| CVE-2022-31004 | Potential secrets being logged to disk in CVE ServicesCVEProject · cve-services | High7.5 |
| CVE-2022-25779 | Insufficient scope checks allows adding unrelated audit log entriesSecomea · GateManager | Medium4.3 |
| CVE-2022-22291 | Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log…Samsung Mobile · Samsung Mobile Devices | Medium5.5 |
| CVE-2021-25423 | Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password…Samsung Mobile · Watch Active2 PlugIn | Medium5.5 |
| CVE-2021-25422 | Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password…Samsung Mobile · Watch Active PlugIn | Medium5.5 |
| CVE-2021-25421 | Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password…Samsung Mobile · Galaxy Watch3 PlugIn | Medium5.5 |
| CVE-2021-25420 | Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password…Samsung Mobile · Galaxy Watch PlugIn | Medium5.5 |